CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-66399

    🚨 CVE-2026-66399 phpMyFAQ before 4.1.6 contains a privilege escalation vulnerability in GroupController::updateMembers() that allows...

  • CVE-2026-17191

    🚨 CVE-2026-17191 An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to...

  • CVE-2026-17192

    🚨 CVE-2026-17192 A VCO feature does not sufficiently validate caller-supplied input, allowing requests to be made on behalf of authenticated...

  • CVE-2026-24252

    🚨 CVE-2026-24252 NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this...

  • CVE-2026-63077

    🚨 CVE-2026-63077 In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

  • CVE-2026-66390

    🚨 CVE-2026-66390 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Wicket. This issue...

  • CVE-2026-66391

    🚨 CVE-2026-66391 Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket. This issue affects Apache...

  • CVE-2026-66729

    🚨 CVE-2026-66729 facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body parser that allows...

  • CVE-2026-66730

    🚨 CVE-2026-66730 facil.io 0.6.0 through 0.7.6 contains a denial-of-service vulnerability in the multipart body parser that allows an...

  • CVE-2026-66731

    🚨 CVE-2026-66731 facil.io 0.7.5 through 0.7.6 contains a denial-of-service vulnerability in the HTTP/1.1 chunked transfer encoding parser that...

  • CVE-2026-17552

    🚨 CVE-2026-17552 Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenation in...

  • CVE-2026-17568

    🚨 CVE-2026-17568 Improper access control in the role membership management endpoint in Devolutions Server allows an authenticated...

  • CVE-2026-17569

    🚨 CVE-2026-17569 Improper access control in the NetBox synchronizer in Devolutions Server allows an authenticated user with view-only permission...

  • CVE-2026-17570

    🚨 CVE-2026-17570 Improper access control in the PAM password history endpoints in Devolutions Server allows an authenticated low-privileged user...

  • CVE-2026-48030

    🚨 CVE-2026-48030 Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.4, an OS Command...

  • CVE-2026-48051

    🚨 CVE-2026-48051 Papra is a minimalistic document management and archiving platform. Prior to version 26.5.0, Papra's webhook delivery system...

  • CVE-2026-48052

    🚨 CVE-2026-48052 Papra is a minimalistic document management and archiving platform. Prior to version 26.5.0, an authenticated user who is a...

  • CVE-2026-54272

    🚨 CVE-2026-54272 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are...

Статистика статей

Статьи
53,087
Просмотры
259,927
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.
Назад
Сверху